Beveiligingsadvies

CVE-2025-43798

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-15 20:53:02

Laatst bijgewerkt 2025-09-16 15:45:47

Toegewezen door Liferay

CVSS-score 2.1

Status PUBLISHED

Beschrijving

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.

← Alle CVE's bekijken Bekijk op cve.org ↗